ABAC
Attribute-Based Access Control
Attribute-based access control makes authorization decisions by evaluating attributes of the user, resource, action, and environment. Policies can reference department, clearance level, device posture, time of day, and location.
Cómo se usa en ciberseguridad
Security architects choose ABAC when static roles are too coarse for fine-grained access decisions. Cloud engineers write ABAC policies in AWS IAM or Azure ABAC to control resource access dynamically. This model supports zero trust by evaluating context on every request.
Término relacionado en el glosario: attribute based access control
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.